CVE-2017-11440

In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter...

PT-2017-12015

Name of the Vulnerable Software and Affected Versions Sitecore version 8.2 Description The issue allows for absolute path traversal. This can be achieved through the fi parameter in the /shell/Applications/Layouts/IDE.aspx endpoint and the Reference parameter in the /admin/LinqScratchPad.aspx...